THE PROTECTION OF PERSONAL INFORMATION

1. The Company enforces The Protection of Personal Information (POPI) Act No 4 of 2013 and aims:

1. to promote the protection of personal information processed by public and private bodies;

1. to introduce certain conditions so as to establish minimum requirements for the processing of personal information;

1. to provide for the establishment of an Information Regulator to exercise certain powers and to perform certain duties and functions in terms of this Act and the Promotion of Access to Information Act, 2000;

1. to provide for the issuing of codes of conduct;

1. to provide for the rights of persons regarding unsolicited electronic communications and automated decision making;

1. to regulate the flow of personal information across the borders of the Republic; and

1. to provide for matters connected therewith.

 

2. Processing of personal information in general

1.        Condition 1 Accountability: Refer to Section 8 of the POPI Act

regarding Responsible party to ensure conditions for lawful processing

1. Condition 2 Processing Limitation:

1. Refer to Section 9 of the POPI Act – Lawfulness of processing

1. Refer to Section 10 of the POPI Act – Minimality

• Refer to Section 11 of the POPI Act – Consent, justification and objection

1. Refer to Section 12 of the POPI Act -Collection directly from data subject

1. Condition 3 Purpose specification

1. Refer to Section 13 of the POPI Act – Collection for specific purpose

1. Refer to Section 14 of the POPI Act – Retention and restriction of records

1. Condition 4 Further processing limitation – Refer to Section 15 of the POPI ACT regarding further processing to be compatible with purpose of collection

1. Condition 5 Information quality – Refer to Section 16 of the POPI Act – Quality of information
2. Condition 6 Openness

1. Refer to Section 17 of the POPI Act – Documentation

1. Refer to Section 18 of the POPI Act – Notification to data subject when collecting personal information
2. Condition 7 Security safeguards

1. Refer to Section 19 of the POPI Act – Security measures on integrity and confidentiality of personal information

1. Refer to Section 20 of the POPI Act – Information processed by operator or person acting under authority

• Refer to Section 21 of the POPI Act – Security measures regarding information processed by operator

1. Refer to Section 22 of the POPI Act – Notification of security compromises

1. Condition 8 Data subject participation

1. Refer to Section 23 of the POPI Act – Access to personal information

1. Refer to Section 24 of the POPI Act -Correction of personal information

• Refer to Section 25 of the POPI Act – Manner of access

Click here https://chrisnelsa.co.za/wp-content/uploads/2026/01/POPI-ACT-No-4-of-2013.pdf to read more on the POPI ACT